pug-inu[.]entry-cryptolist[.]app

Analysis of the domain pug-inu.entry-cryptolist.app indicates an active phishing infrastructure targeting cryptocurrency users. As of July 29, 2026, the domain is flagged by 12 of 91 security vendors on VirusTotal, suggesting moderate detection coverage. It resolves to the IP address 188.114.96.3, which lacks associated nameservers (NS_NOT_FOUND), a common indicator of ephemeral or misconfigured hosting setups used to evade tracking. The domain appears on at least one security blocklist and is actively blocked by PhishDestroy, reinforcing its classification as malicious.

No specific brand impersonation is confirmed in the available data, though the domain name suggests a focus on cryptocurrency-related fraud, potentially mimicking wallet services or token distribution platforms. The absence of nameservers and the use of a generic hosting IP (188.114.96.3) align with tactics observed in phishing campaigns designed for short-term deployment. Defenders should treat this domain as elevated risk, particularly for users interacting with cryptocurrency services. No HTTP status, SSL certificate details, or page content analysis are provided in the intelligence, limiting further assessment of the site's operational state.

The domain's infrastructure does not appear to leverage bulletproof hosting or known phishing kits, based on current data. Organizations are advised to block the domain at the DNS or proxy level and monitor for related indicators, such as the resolving IP, in network logs. Additional context, such as user reports or endpoint telemetry, may clarify the exact phishing mechanism employed.